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[Purpose] To inclement signature and scramble processing by 
partially modifying and adding application software in the 
current card FAX system. 



[Constitution] 

It conqnises of a means for embedding a signature sentence in 
a part of the image data in order to denxmstrate legitimacy of 
Ihe sender and flie transmitted document, and a means for 
q>plyingai 




A proposed confidentiality protected system 
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[Scope of the Qaims] 
[Qaim 1] 

A facsimile characterized in that it comprises of a means for embedding a signature sentence in a part of the image 
data in order to demonstrate legitimacy of the sender and the transmitted document, and a means for applying a 
scramble processing to Ihe encoded image data. 
[Detailed Description of the Invention] 
[0001] 

[Industrial Field of Application] 

The present invention relates to a facsimile having confidentiality protection fimctions by signature and 
scrambling, hi particular, it relates to a facsimile generally called a card FAX using a personal computer (herein 
after abbreviated as PC) as a communications means. 
[0002] 
[Prior Art] 

A great revolution has occurred in the concept of document connnunicaticms by the invention of fiicsimile 
communications, hi a modem society requiring high speed, the facsimile has become an indispensable 
communications means^'\ However, along with increased values of utilization of facsimiles in document 
communications, tiie necessity of measures for confidentiality protection such as reUabiUty of senders and document 
transmitted has also increased. That is, from general documents to important documents, confidentiality protection 
measures are required by the documents based on their purposes. In the current facsimile communications based on 
the CCITT standards, no measures have been taken regarding confidentiality protection in documents fi-om facsimile 
terminals regarding transmitted data. The following operational problems have been pointed out: (1) error transfer 
due to dialing errors and danger of information leaks by a third party at the receiver side, (2) third party invasion 
without permission such as direct mail including advertisements and a variety of kinds of announcements cannot be 
avoided, and (3) diere are no protections against wire tapping and altering on the communications network. 
Recently, special adaptors having authentication fimctions for senders and sent documents have been developed in 
order to prevent wire tapping and interception. 

[0003] On the odier hand, due to rapid progress in microelectionics technology, high fimctionaUty PCs can be used 
at low cost and attempts to use PCs tiiat have been used independentiy as communications means as well have been 
made actively. This ti«nd has been adapted due to the reasons that it is more economical than purchasing and 
utilizing a special communications temiinal separately and that data processing and storage functions of PCs can be 
used additively. Facsimile communications using PCs have already been used in practice as in the use of extension 
board type communicatims adaptors called a card FAX (or PC FAX) and its effectiveness has been demonstiated. 
[0004] Now, Figure 1 shows an example configuration of the conventional card FAX. A card FAX is the most 
compact communications adaptor that enables facsimile communications immediately if it is inserted through the 
extension slot of a PC to be connected to the telephone line. In terms of hardware, a NCU (network control unit) 
and a modem for control signals and image signals are loaded on an extension board which functions as a 
communications interface. On die other hand, attached apphcation software generally implements transfer control 
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and encoding functions of image data. In the case of a card FAX, the software also functions to convert text data to 
image data and encoded data so that the documents prepared by word processing programs can be sent directly by 
facsimile communications. In this report, we focused on the greatest advantage of facsimile communications using 
a PC, that is, the degree of freedom of additively implementing various functions using the software, and attempted 
to have security functions with tiie card FAX. In addition to the conventicmal general functions such as 
sending/receiving, reading the document, converting files, and outputting documents, the present invention 
implements a signature showing legitimacy of the sender and the transmitted document, and a scramble function for 
the purpose of confidentiality of die document by using software. 
[0005] 

[Problems to be Solved by the Invention] On the assumption that a card FAX using PCs will become a powerful 
communications means in the future, a card FAX having security functions will be required. The purpose of the 
present invention can be implemented by only partially modifying and adding appUcation software in the current 
card FAX system and signatures and scrambling can be implemented by the software using the processing functions 

of a microprocessor. 
[0006] 

[Means for Solving the Problems] To solve the aforementioned problems, the facsimile that the present invention 
provides comprises of a means for embedding a signature sentence in a part of the image data in order to 
demonstrate legitimacy of the sender and the transmitted document, and a means for applying a scramble processing 
to the encoded image data. 
[0007] 

[Examples] Figure 2 is a block diagram showing a confidentiality protection system in die present invention's 
facsimile. The sender side consists of a signature process and an encoding process, and the receiver side consists of 
an authentication process and a decoding process. 

[0008] In the signature process at the sender side, a signature is appUed to a part of the input document in order to 
demonstrate legitimacy of the sender and flie transmitting document. That is, for a part of the document image data 
stored in the memory, for example, for the area where the name and address of the sender is stored, a signature 
sentence is embedded by the processing functions of the microprocessor and encoded to be transmitted. The 
encoded data of a part of the document where the signature is embedded is directly sent without scrambling. Thus, 
the document header (header part) can be read as normal. In this process, the sender inputs a signature ciphering 
key Ko and signature sentence N, along with the transmitting document M]. When the signature process (embedding 
the signature sentence) is completed, a first scramble key Kl in the encryption process is generated to shift to the 
encryption process. 

[0009] In the encryption process, a scrambling process is applied to the image data encoded by the key Ki (i = 1 , 2, 
. . ..) generated from the sequential image data. A method of scrambling will be described later. The encoded data 
(binary) generated by blocking by the unit of power of 2 are followed by transposition encryption to be transmitted. 
[0010] On the other hand, in the authentication process at the receiver side, a signature ciphering key Ko common 
to the sender and the receiver is input and the sender and the transmitted document are confirmed by legitimacy of 
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the signature sentence Nj extracted from the received data F (Mi). If the signature sentence N, is a data having a 
meaning, the legitimacy of the sender and the transmitted document are confirmed and shifts to the decoding process 
based on the decoding key Ki generated. In contrast, if N, is not a data having a meaning, the sender or the 
transmitted document is determined to be not legitimate and the subsequent processing is interrupted and the 
received document is aborted. 

[001 1 ] In the decoding process, the encrypted received data is reverse-scrambled in blocks as units based on the 
key Ki (i=l , 2, . . .) generated fhrni the sequentially decoded image data so that the encoded data are transfbimed to 
image data. 

[0012] In the proposed system as described above, only the sender and the receiver cipher manage the common 
key Kq. In addition, the scramble (reverse-scramble) key Ki (i=l , 2, . . .) are sequentially generated during die 
processing process dqiending upon die structure of the document image so that it is difficult for the diird party who 
does not know the signature, die structure of the encryption function, and die cipher key Ko to detect dus. 

[0013] 

[Signature method] 

[Embedding of a signature sentence] The signature indicating the legitimacy of the sender and the 

transmitting document is carried out by directly embedding the signature sentence into the digitalized document 
image data. That is, from the image data resolved into the scanning lines, the scanning lines designated randomly by 
the keys are referred and the oddness/evenness of the distance among the variable pixels on the reference scanning 
lines and encoded scanning lines are modulated by 1 bit of signature data. 

[0014] Initially, variable pixels on the encoded scanning lines and s pieces of reference scanning lines are defined 
as follows (See Fig. 3). 

al : First variable pixel of the tai:get run length (hereinafter refened to as RL) on the encoded scanning lines. In this 
case. No. 1 RL is excluded. 

bl(j): Same color (as al) variable pixel to corresponding to al on die j-th (1 ^ ^) reference scanning line. That is, 
if the pixel immediately above al is in die same color as al , die first pixel of the previous RL, if die pixel 
immediately above al is in an qjposite color from al , the first pixel of the RL located right of al . 
^ (al bm): a distance between the variable pixel al and bm (j) 

0j: indicates even/oddness of Aj (al bm). 0, if ^ (al bl) is an even number and 1 , if ^ (al bl) is an odd number. 
[00 1 5] In the signature keys of r bits: 
KO={kO(tO) |tO = 0,l,...,r-l; 

kO(tO) = 0. 1 (1) 
if kO (tO) = 1, a lengdi of die bit fixim immediately before kO (tO') = 1 to kO (tO) = 1 

j = tO-tO' (2) 
(where at first kO (tO) = 1 , a distance between j = tl and variable pixel bl (j) on the j-tfa reference scanning line is Aj 
0 + 1). Then, 1 bit signature data ns (u) extracted from q bit signature sentence 

Ns={ns(u) I u=0,l,...q-l;ns(u) = 0,l} (3) 
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if embedded in the even/oddness 0j of the variable pixel a (al bl) on the encoded scanning lines by the following 
procedures. 

(1) If £4 (al bl)>0; ^ (bO al) >1 and Aj (bl a2) >1 are satisfied, 

(a) Directly if 0jxORns(u) = O 

(b) Shifts to the right by the portion of one pixel if 0j x ORns (u) = 1 

(2) If Aj (al bl) ^; Aj (bO al) ^ Aj (al bl) + 2 is satisfied. 

(a) Directly if 0jx ORns (u) = 0 

(b) Shifts to the left by the portion of one pixel if 0j x ORns (u) = 1 
However, if kO (tO) = 0, signature data is not embedded. 

[0016] The signature data embedded in these procedures can be easily decoded in the following procedures: 

(1) If Aj (al bl) > 0; Aj (bO al) ^1 and Aj (bl a2) ^1 are satisfied, 
ns (u) = 0j 

(2) If ^' (al bl) ^ (bO al) ^ Aj (al bl) + 2 is satisfied, 
ns (u) = 0j 

And then, the extracted 1 bit signature data ns (u) is assembled as a signature sentence Ns. The aforementioned 
regulations (1) and (2) are given in Equation (5). 

[0017] Since the signature sentence is embedded depending upon the structure of the document image (RL pattern 

over several scanning lines), it is difficult for the third party to forge or alter the document image Mf. 

[0018] 

[Generation of scramble keys] Next, a method of generating the scramble keys Ki (I = 1 , 2, . . .) in the 
encryption process will be described below. Ki , based on Ki-1 used inmiediately before (initial signature key kO), 
is generated fixnn die structure of die document image data. Initially, regarding the maximum number of reference 
scamiing lines s, a minimum integer value h satisfying 

s (6) 
is calculated and given as hO. 

From the bit series of the immediate key Ki-1, next hO pieces of bits 

{ki-1 ((ti-1 +a)modr) | o=0, 1, ...hO-1} (7) 
are extracted and then transformed to decimal dO. Next, 
according to 

l = (dO+l)mods (8) 
a reference scanning line number 1 is determined. The even/oddness 01 of the distance Al (al bl) between the 
variable pixel al on the encoded scanning lines and the variable pixel bl (1) is determined and then 
kl (tl) = 01 is given. This operation is continuously repeated r times to obtain scramble ke^ 

Ki = {ki(ti) |ti = 0, 1 r- 1: Ki (ti) = 0, 1} (9) 

[001 9] bl this report, the scramble method wherein the data encoded by sequentially generated keys depending 
upon the stmcture of the document image is transpositioned is used. An actual method will be shown below. 
[0020] 
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[Scramble method] 

[Concept of encryption] An encrypted sentence obtained by encryption of a plain sentence M by the key K is 
expressed as 

C = E(K,M) (10) 
In the transposition method in the conventional hardware, the structure of E is fixed so that the degree of freedom of 
transposition is fully dependent upon the degree of freedom of the key 

Ci = D(Ki,M)(i = l,2,...) (11) 
was obtained. In contrast, according to the present method, E is configured by a software system. If the key Ki is 
input, the system automatically generates and orients different partial encrypter (decoder) Eij and partial key Kij (i = 
1,2, ...3 = 1,2, ...n) and they are further combined to output 

C = Eil (Kil, Ei2 (Ki2....Ein (Kin, M))...) (12) 
[002 1 ] In the presoit system, Equation (1 2) is implemented by the following procedures. Initially, when the 
scramble keys Ki (I = 1 , 2, . . .) are input, Eij and Kji are developed in the memory using a portion of K's. As shown 
in Fig. 4, a portion of the bit series of keys Ki is used as a machine language program and the subsequent series are 
used as a partial key. Next, the encoded data stored on the memory is blocked by units by powers of 2, and using 
the program generated, scrambling is executed using the coordinate values of the individual data in the blocks as 
arguments. Using the operation results as new coordinate values, the encoded data are output. After transposition of 
one block is completed, a scramble key Ki+1 for the next block is output along with the encrypted series and the 
same processing is repeated based on Ki+1 . The flow of this process is shown in Fig. S. 

[0022] Each of Eij used must be a mapping function of Injection (1 : 1) due to the necessity of configuring the block 
transposition encryption on the whole. Therefore, in the present system, basic operation instruction and the 
extended operation of the central processing unit (CPU) are selected as Eij. As a result, an encrypter and a decoder 
can perform a high speed transposition processing using only a small amount of memory 

[0023] 

[CPU instruction to become a bijection mapping function] 

Among the instructions of the CPU such as addition/subtraction/multiplication/division, those configuring a 
bijection nuqjping between the numbers operated and the operation results are limited. The CPU instructions used 
are listed below. In this case, the length of the resister of the CPU generating the aforementioned scrambler is 
expressed as R. Therefore, the addressing range in tiiis resister is 0 ~ 2R-1 and a one block to be input has this size 
as a unit. 
[0024] 

[Exclusive OR] 

A processing of performing an exclusive OR operation for the constant (encryption key) provided for each bit and 
every bit in the register is a bijection. If this operation is expressed by XOR, number to be operated is M, and the 
key constant is Kxor> the (q>eration results are expressed by 

C = XOR(KxoR.M) (13) 

Obviously, 
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M = XOR(KxoR,C) (14) 
In this operation, respective data having two coordinate values M and C with the relationships expressed by 
Equation (1 3) or Equation (14) are replaced by each other. That is, all the data in the block are substituted by the 
pairs satisfying the aforementioned relationships. 
[0025] 

[Left/Right Rotation] 

The bits in the register are shifted by the specified number of bits in the specified direction, and the places expelled 
out of tiie register are input fhrni the opposite side, in an operation called a rotation operation that is a bijection. The 
left rotation is expressed by ROL and right rotation is expressed by ROR. 
[0026] 

[Addition/subtraction] 

A processing of adding and subtracting the data in the register is also a bijection. The addition is expressed by ADD 
and the subtraction is expressed by SUB. Generally in an arithmetic operation instauction such as ADD, when the 
results are overflowed from the places, flag registers are affected. However, only the data in the register is 
considered by ignoring this point, 

C = ADD(KADD,M) = M + KADDmod2'' (15) 
That is, individual data are shifted in parallel for a distance of Kadd- hi addition to the aforementioned CPU 
instiuctions constituting the bijective mapping, the following extension operation becomes also a bijective mapping 
and improves the transposition effect. 
[0027] 

[Replacement of bit positims] 

A processing of repladng the bits in die register to specific positions is also bijection. This operation is expressed 
byEXTl below. The keys Kextti (i)(I=0> l,..R-l)are an array consisting ofRpieces of elements coiTesponding to 
the lengtfi of register R and die respective values indicate positions of bits when fhey are shifted. 
[0028] 

[Positions in each subspace] 

The entire address space expressed by the length of register R is partitioned into subspaces and when a bijection is 
operated in each subspace, the entire transposition is a bijection. As a method of partitioning into subspaces, there is 
a method of shortening the register length, and a method of classification by the pieces of each bit included in the 
register. Here, we used subspaces in the latter group. The operable ROL is applied in the subspaces and expressed 
as EXT2. However, it is appUed to the subspaces excluding the cases when all bits in the register are bit 1 or 0. 

Thus, the keys Kexn (0 (i = 0, 1 R-2) is an array consisting of R-1 pieces of elements where R is the lengdi of 

the register, and die first element indicates die key ROL which is applied to die subspace where i pieces of bits 1 are 

present in the register. 

[0029] 

[Encrypter/decrypter] 
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The encrypter and the descriptor given by Equation (12) generate machine language instructions and their operands 

from the bit series of keys Ki (I = 1 , 2 ). 2 or 3 bits are input from Ki and n-step of a group of instructions are 

generated based on the transformation table shovm in Table 1 and developed as a series of partial encrypters Eij (j = 

1,2 n) in the coded domain of the main memory. In this case, an operand required in each transposition 

operation, that is partial keys Kji (j = 1, 2 .n) is obtained from die bit series of Ki. However, die number of steps 

n of the encrypter is set in advance. For example, if the length of register is R = 16 bits, the number of bits of partial 
keys required in each operation are as shown in Table 2. 
[Table 1] 

Transformation table 



Input bits 


Output codes 


110 


XOR 


000 


ROL 


GDI 


ROR 


010 


ADD 


Oil 


SUB 


111 


EXTl 


10 


EXT2 


Number of bits of partial keys required for operation 


Codes 


Number of bits required 


XOR 


16 


ROL 


4 


ROR 


4 


ADD 


16 


SUB 


16 


EXTl 


64(=4x 16) 


EXT2 


60 (=4x15) 



[0030] 

[Actual procedures for signature and encryption] Li the present example, the confidential data betweoi the 

sender and die receiver is (s, n, KO). The actual procedures are described below. 

[0031] 

[Signature process] Step 1 : Enter a document image Mi, a signature key KO and a signature sentence Ns 
while keeping tO •- 0, tl *- 0, u «- 0. 

Step 2: s pieces of scanning lines are stored in die memory and encoded and transmitted. 

Stq> 3: The processes from Step 4 to Step 9 are repeated until completing embedding of the signature sentence Ns. 
Step 4: The processes fiYnn Step S to Step 8 are repeated until completing scanning of the encoding scanning lines. 
Step 5: Detects a varid>le pixel al. 

Step 6: hO bits containing kO (tO) are extracted from KO and converted to decimal dO, and 1 is decided from Equation 
(8). A variable pixel bl ® on die first referoice scanning line is detected and kl (tl) «- 01 is given, ti tl + 1 is 
also given. 
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Step 7: If kO (tO) = 1, a length of bit j from the immediately before kO (tO') = 1 to kO (tO) = 1 is determined by 
Equation (2). A variable pixel bl^^ on the j-th reference seeing line is detected and the signature data ns (u) is 
embedded by Equation (4). When ns (u) is embedded, u «- u + 1 is given. 
Step8:tO«- (tO+ 1) mod r is given. 

Step 9: The encoded scanning lines are encoded and transmitted as well as the encoded scanning lines are updated to 
the first reference scanning line and the v-th reference scanning line is updated to the v+1 reference scanning line (v 
= 1,2 s-1). 

Step 10: Shifting to the encryption process. 
[0032] 

[Encryption process] Step 1 : Select i = 1 , mput n. 

Step 2: Step 3 to Step 8 are repeated until all encoded data are completed. 

Step3: Setti*- Oandti+l«- 0. 

Step 4: Step 5 to Step 8 are repeated until the amount of encoded data exceeds 2*^ bits or more. 
Step 5: Step 6 to Step 7 are repeated until scanning of the encoded scanning lines are completed. 
Step 6: A variable pixel al is detected. 

Step 7: hO bits containing ki (ti) are extracted from Ki and converted to decimal dO, and 1 is decided from Equation 
(8). A variable pixel bl^" on the first reference scanning line is detected and ki+1 (ti+1) 01 is given, ti =( ti + 1) 
mod r, t i+1 = (t i+1 +1) mod r are given. 

Step 8: The encoded scanning lines are encoded as well as the encoded scanning lines are updated to the first 
reference scanning line and tiie v-th reference scanning line is updated to the v+1 reference scanning line (v = 1, 2, 
s-1). 

Step 9: n-step transposition encrypter is developed from Ki to die encoded domain of the main memory. 

Step 10: The coded data at the address m (= 0 -2'' - 1) are transpositioned at the address m' (= 0 -2"^ - 1) on the 

buffer memory provided separately by the generated encrypter, and then output and transmitted from the address 0 

in die order. i«- i + 1. 

[0033] 

[Authentication process] Step 1 : Enter received data F (Mi) and authentication key KO, while keeping tO «- 0, tl 
- O.u- 0. 

Step 2: Decode the encoded data for the portion of s scanned lines and store them in the memory to be used as 
reference scanning lines. 

Step 3: Step 4 to Step 10 are repeated until decoding of signature Ns is completed. 
Step 4: Encoded data is decoded for the portion of 1 scanning line to use as encoded scanning line. 
Step 5: Step 6 to Step 9 are repeated until scanning of the encoded scanning lines is conqileted. 
Step 6: A variable pixel al is detected. 

Step 7: hO bits cmtaining kO (tO) are extracted from KO and converted to decimal dO, and 1 is decided from Equation 
(8). A variable pixel bl^*^ on the first reference scanning line is detected and kl (tl) *- 01 is given, tl tl + lis 
also given. 
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Step 8: If kO (tO) = 1, a length of bit j from the immediately before kO (tO") = 1 to kO (tO) = 1 is determined by 
Equation (2). A variable pixel bl^^ on the j-th reference scanning Hne is detected by Equation (5) and the signature 
data ns (u) is extracted. When ns (u) is extracted, u «- u + lis given. 
Step9:t0*- (tO+ 1) mod r is given. 

Step 10: The encoded scanning lines are updated to the first reference scanning line and the v-th reference scanning 
line is updated to flie v+1 reference scanning line (v = 1, 2, s-1). 

Step 11 : If Ns is legitimate, shifting to the decoding process, otherwise, the received data F (Mf) is aborted. 
[0034] 

[Decoding process] Step 1 : Select i = 1 , input n. 

Step 2: Step 3 to Step 8 are repeated until all encoded data are completed. 

Step 3: 2*^ bits are extracted from the received data F (Mi) and set ti 0 and t i+1 «- 0. 

Step 4: A n-step transposition enciypter is developed from Ki to the encoded domain of the main memory. 

Step 5: The received data at the address m (= 0 ~2'* - 1) are transpositioned at the address m' (= 0 ~2'' - 1) on the 

buffer memory provided separately by the generated decoder, and then output from the address 0 in the order, i *- i 

+ 1. 

Step 6: The decoded data are converted to image data and the Step 7 to Step 10 are repeated for the scanning lines 
converted. 

Step 7: Step 8 to Step 9 are repeated until scanning of the encoded scanning lines is completed. 
Step 8: A variable pixel al is detected. 

Step 9: hO bits containing ki (ti) are extracted from Ki and converted to decimal dO, and 1 is decided from Equation 
(8). A variable pixel bl® on flie first reference scanning line is detected and ki+1 (ti+1) 01 is given, ti =( ti + 1) 
mod r, t i+1 = (t i+1 +1) mod r are given. 

Step 10: The encoded scanning lines are updated to the first reference scanning line and the v-th reference scanning 

line is updated to the v+1 reference scanning line (v = 1, 2 s-1). 

[0035] 

[Investigating the scrambling effect] 

In order to investigate whether the 0. 1 bit series of encoded data output as the result of the execution of the said 
scrambling procedures are sufficiently random, with respect to Ae number series of the M series by the feedback 
shift resister that has been proven to have sufficient pseudo- randomization, the pr(q)erties were compared. 
However, a MH system was used as an encoding method for the fiussimile document, and CCITT Test Chart No. 4 
was used as an input document. 

[0036] (1) Probability of occurrence of sequential pieces 

"Sequential" means a line segment consisting of p sequraitial pieces of 1 or 0 in the binary series and bodi ends are 
either 0 or 1 . In the M series, with respect to the 1 or 0 sequential pieces, the following formula (16) is expressed: 

(Sequential pieces with a lengtii p) / (Sequential pieces with a length p + 1 ) = 2 (16) 
On the q-step shift register, this condition is satisfied except for the cases when a length is q and q-1 . The sequential 
status was investigated for tiie encoded data of the MH system and whoi the data were scrambled with a register 
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length R of 16 bits with a basic instructi(»i steps n of 32. Figure 6 shows the results of logarithmic graphs of the 
sequoitial pieces plotted based on log 2. The dotted line indicates the result for the equivalent steps (16 steps) of the 
shift register. According to this result, the data series scrambled by the present method demonstrated excellent 
results in the case of a shift register with respect to the sequential pieces. If n increased, better results were 
confirmed to be obtained. 
[0037] (2) Autocorrelation ftmction 

Next, randomized properties of the scrambled data series were investigated using the discrete type autocorrelation 
ftmction defined by tiie following equation^' 
[Formula 1] 

3 r-j 

Cg (h) - 111 S y. (17) 

where {y,} indicates a term in the binary series, and h is a distance between the two terms {y,} and {yrn} 
ifh ?iO,Co(h) = 0 

ifh = 0,Co(h) = l (18) 

The randomized properties of the series can be characterized as shown above. The respective autocorrelation 
functions were obtained for the encoded data of the MH system and when the data were scrambled with a register 
length R of 16 bits with a basic instruction steps n = 32. The results are shown in Fig. 7. The operation results of 
the present method were found to satisfy Equation (18) similarly in the case of the autocorrelation function of the 
shift register as indicated by the dotted line. 
[0038] 

[Effects of the Invention] 

As was explained in detail in the aforementioned example, in die present facsimile system, (I) a signature is applied 
by embedding a signature sentence indicating legality of die sender and die transmitled document in a part of the 
image data, and (2) a scramble processing is applied to the encoded image data. By enq)Ioying these mediods, an 
extension board type FAX adaptor implemented by the present invention is single in terms of hardware so that it is 
available at a low cost. Therefore, when compared to an adaptor specialized for confidentiality protection, security 
conununications can be implemented at a low cost. In addition, the scrambling processing is carried out by blocking 
the encoded data in units of powers of two for transposition ciphering so that tiie advantage is fliat data is not limited 
by various encoding methods such as MH, MR and MMR for facsimiles and the quantity of ti:ansmission codes. In 
addition, the present invention's facsimile system can be implemented only by partially modifying and adding to the 
application software used in the currently used card FAX system. As a result, security communications can be 
inq>Iemented at a lower cost dian a special adaptor for confidentiality protection. 
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[Brief Explanation of the Drawings] 

[Fig. 1] A diagram showing the configuration example of the conventional card type FAX. 
[Fig. 2] A diagram showing the confidentiality protection system as an example of the present invention. 
[Fig. 3] A diagram showing definitions of the variable pixels on the encoded scanning lines and s pieces of 
reference scanning lines. 

[Fig. 4] A diagram showing flie partial encrypters (decrypters) Eij and partial keys Kij. 

[Fig. 5] A diagram showing a flow of the scrambling processing in the present invention's example. 

[Fig. 6] Logarithmic graphs plotted based on log 2 for the sequential pieces in the example of the present invention. 

[Fig. 7] A diagram showing autocorrelation fimctions. 



[Fig. 4] 



Procedures for generating Eij and Kij 
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(57)Abstract: 

PURPOSE: To reduce the cost of an expansion board type FAX 
adaptor by imbedding a signature of a sender and a 
transmission document into a picture data and applying 
scramble processing to a coded picture data. 
CONSTITUTION: A signature sentence is imbedded to part of a 
document picture data by microprocessor processing. In this 
case, a signature ciphering key KO and a signature sentence Ns 
are inputted together with a transmission document M to 
generate a scramble key K1 thereby setting the mode to the 
ciphering process. A picture data coded by using the key K1 is 
sent while being transposition ciphering as two binary data 
subjected to block processing In the unit of power. A receiver 
side receives a key KO In common to a sender and a receiver 
and the transmission document Is confirmed based on the 
adequacy of the signature sentence Ns. When the adequacy is 
confirmed, the key K1 is used to set the decoding process. 
When not adequate, it is aborted. Thus, since only the sender 
and the receiver cipher and manage the key KO, a 3rd party 
cannot detect the key. 
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toa)»«s:*Bi4ix-^'©-«iJicatoat;#st, 

[000 1] 

lC/<-VfJU3>bfi-4i iHLTyiV^^tt^mti) 10 
[0 0 0 2] 

T 7 r ^7 -> 5 'J l± t. (±-V»^ Pl^i J&a^l^a t TJC o T L^ 

tiir>*>. -»X»A^&»»X»i=SiJ«*-e. -trottfflB 20 

c I TT<D«ii^bliJ:-55it7:?r^vS'Jii{t-e(i. 7 
r <7 i/ 5 'J 4|«*A^ p,4|*lli|(DaifllT-$ i;iil-5*-eX» 
©«^B«III-M■r««»)!)<fiI4,ft*4^Tl.^^a:L^fc«)lc, 

3«a)^«l=J:«1««ll»(0«:Ktt;tl<ft«, (2) 

•v>*««rt«i:^<D^f'r u^? h>-;uMJt«=#(D*»f« 

A^I»CCtA<■Ct^EL^, (3) K'7-^7±-e 

©Jfitt■a#^(cs^LT^liK^i•^?*■5, ^ct•<Daffl±a) 

[0003] ■7'f<7niU^7 hP-<7Xa«<D3|l 

/^>'=l>^ffll,^fc7r^v5'Ja^Sl::•^L^Tt,, *-K 40 
FAX (*fcl±/'?V=i>FAX) i:«i-r-5ffi31;t<-KS 

cDa{tfflT^f:/^"A<-r-e(c*ffl<b**i. ^ro*Sb14A<s% 

[0 0 0 4] *-r, «*a)*-KFAXa)1«BE«^01 

IZiTv-To *-KFAXI±. /"CVa>(Offi?lXP-V hicjf 

A L r misiUii=}t«E-r4xif«^ ic 7 t ^ v * u a« ^ 

i,. /N-K-^xTWicit, ji;?i»fttNcu (^f.-vK-:? 

i3<ki;iM»fflt*ffli:H«flH*ffl©MOD 



e3i«»i3 j:t;Di«x-^' <D«?-i*^bai<ii*3ia-r 
-ISWT?**, *-KFAXT?(i7-:^p«if-e 

J:*7 7^v£ija«a)ft*<0fiJjS. -r^tt^^. V7h 
«SL, *-KFAXlc-fe=\^iLiJ^<«1il$»fc-a:SC 

fl:&:«a)iES1±$^-rf=«>a}«« fe*<):i;x«a)»s$ i 

[0005] 

[38ll*<»StLJ:?t-r«»ll] -tC-e, C©«W-C? 
(±, V □ :/ « fijffl Lfc * - K F A X <tafll 

-Kfax4<««)&*l4. *f6W{DSWtt, UffO*- 
KFAX5/:^TAI=j3l+4T:?'J'y-S'a:/ ■ V"? h-;? 

iT*-a5«H- jai)Dt§fc*ifciigiBiiiiT?ifcy, v-r 

[0006] 

[Rll$ff%-r«/!:«>a)¥«] il(ri2a)l«H$ff9(-r«f= 

[0007] 

[«»«] H2i4*«M«)7T<?i/syirfc(tsai«« 

p-bxj3J:i;ii*<b:?n-b^. 56«i!-eiiBIE:^p-lr^ 
fc J:^;a^*^P•bX©■€•i^•f *L 2 0(D:^p■I^X*^ 

[0 0 0 8] 3l««i=i3i+S»«:fp-trx-eii, 

t ai(ts:»roiEatt^5i-r fc «) I- A*)X»fl)-a5 

^P-lr«v9-<D«i31«l!llrJ:y»«X^a«)ii^. mmt 

J:oT. :ft:ftlfilffi CN-y^f-ftJ) (4t£3lEay*i]tt 
ftS:»Mi ■l:#tlr»«fflroWEfilKo il3cfct;»«XNs 
•^^<DBt^^^b:/p-trxlcfclt•S.S*l]ro;?.^7>3^;^ 

ttKl *±ritL. l«^*^b3^P-tXlCi^^Tt-5o 

[0 0 0 9] le^^ft:?p-tr7.-el±. ^*®«T-^'*^b 
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±fiE**L-5«Ki (i=1, 2, •••) \z^^)n^it^*i 

^7ftLfc»^* (231) y'-^^mm.vt^itL. mstt 

■So 

[0 0 10] »««l(cfc(+-5Bii3fn-t»7.-e(i, 

-^iF (Mi ) J:yttlffl**L/=»«S:Ns ©iESttlCj: 
ttl=!H»:^p-lr;^l::»ff-r'S, a»(c, N. 

s^^cc.(^ai««*fcl±JSfllx»l±jEa-e^i:L^^:♦lJ 
[00 11] 9m:fa-ii7.v\t. *3R«4»**ifcli{|ix 

— ^^*^C.±«*i^4«Kl (i =1. 2-) ICJ:y«# 

[0 012] C<DJ:5l=a3lSt«i/XxA-ei4, 
is J: t;S(l«lt^att Ko /£ It $«BB • Wm-tiXli^ 20 

l^. *fc. x^7>:?;u (a»x^75>:?;u) aki ( i 

= 1,2. ■■■) liX»Il«<0lij6l-«c?FLT«iaa8l= 

Ko = {ko (to ) I to =0, 
ko (to ) =0, 1 } 
l::feLxTko (to ) =10t*. EfrOk 

j =to -to ' 
*3RA4 (fcfc* L, »*Dfl) ko ( 1 0 ) = 1 -ei± j = t 30 

N« = {n. (u) I u = 0. 1, 



[0 0 13] 

l=»«S:*«»aftat^C<!:lcJ:yff5. t^t>*>. it 

X^bBiitniia)£Xia)fl«tt«i e«> h(0««7-«i=<i: 
yiEH-r*. 

[0 0 1 4] I94^bj£«it^ 8 4(a>#ii£s«i± 

(OiE^bHlt/^^l=OI,>TI2lTa>J:ai=£«-r« (H3# 
Bi) . 

al :»*<b**«±<)!)ai7>UV^^;^ (lUTRLi: 

<. 

b1 (J> :«j (1^j ^8) #iij£Ctt±d!)al ICjtt 

ie-r«ai tn^o^itm*. t«t>«. ai (dk^b 

ai (0|t±BltA<al ^i£fia)j:»ld:al J:y«t=ft« 
RLa}««]<OBIIt. 

Aj (al bm ) :«^bBiKal tb«, (DmMo 

4>} : Aj(al b1 ) nmtt^i^-L. Aj (a 

1 bl ) t<9k»i3:^li0, Aj (ai bl ) t^ttHLtH^ 

[0015] zoki. re»vKa}*«tt 

1, -. r-1 : 

(1) 

0 (to ' ) =i)!(v&ko (to ) =1 ^-eroe^y h* 

(2) 

1 t»j#ifl7fe*«±<0«<kB«bi (j) MOEttAj 

(ai bl ) ®««tt«J IC, qe-yl>©»«X 
q-1 ; ns (u) =0, 1} 



(1) Aj (al bl ) >Ofl)i:#, Aj (bo ai ) 
^1A^-^Aj (bl 32 ) ^l^m^-Titihlt. 

(a) (*j XORns (u) = 0 05 i: #-?-<0**, 

(b) (/)j XORns (u) =1<Di:#a1 * 1 B*» 

(2) Aj (al bl ) ^OOiti. Aj (bo al ) 

^-Aj (al bl ) +2*atfi-r**&ii, 

(a) 4>i XORn. (u) =0©t*-t(D**. 

(b) (Pi XORns (u) =1©t»a1 * 1 B«» 

S'^^B-rSo ±iB (1) at; (2) ©a»*ic (4) 

tt^o fcfc'L. ko (to ) =0(Di:*l4»«T— S» 

[0 0 16] *fc, cro^micj:ya«)ji**ifc»«x 

(1) Aj (al bl ) >0<Dt^. Aj (bo al ) 



^lA>OAj {h^ a2 ) ^^tm&t^t£^,lt. 

ns (u) =0j , 

(2) Aj (al bl ) ^Oa)tt. Aj (bo al ) 

^-Aj (al bl ) +z^ms.-ri>um. 

ns (u) =0j . 

■tLT. ttffl**ifci e->h©»«x-ains (u) * 

•«XN. kLX»9i-iLXio ±IB (1) Xtf (2) 0) 
«ti|«A (5) ktio 
[0 0 17] ««Xa)«A)&^l4=(0J:7l=%«B«a) 

ffit («lka)£S«i=:K>^='SRLa)/<^-» 
Tfi*3*l«©-e, «3»A<»«x*a<^Lfcy. S:«B 

«Mf ■ 3t^f^■r -5 z t lian-efc-s. 

[0 0 1 8] 

\i^7.<p=j:y:J)\,mK\ (i=i. 2. •••) 
(coLxTgi-r. Ki li, niricttffls^ifcKi-i 

(i»««Ko ) S:»B«-r-^'<Dliiit*>b* 
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ltfr(D«Ki-i <De->KIR?iJ]6^c.o#©ho fl©lf-yK 

{ki-1 ( (t i-1 +a) m( 
ff = 0, 1 . -, I 

trnthL. zh^^ oiittdo i^«l*-r-5o o^ic. 

I = (do + 1 ) mo d s 

1 (» IHlOEttAl (al b1 ) (Ofl«tt(^l 

Kl = {ki (ti ) I ti = 
ki (ti ) =0. 

[00 19] C©*8#-ei±, C©J:9lcA»|llKD«Jft 

C = E (K. M) 

titJU-ti, «*ro/\-K';7i7icj:«iB«a-ei±E(J!> 
«|jfi^!)<el£$tlrl^<&/hA. lESa)SAS[ttt(Dg«« 

Ci =E (Ki . M) ( i = 

C = EI1 (Kil, EI2 (Ki2 
[002 1] COTi'X'TA-CfiiC (1 2) *JaiT<D*l« 

■ena-r-S. *r, x<77>:^;u«Ki (i=i. 2. 

•••) *<A***li)t. ^(D-ffl5^fi]fflUr>^ 'J±ICE 
ij fcJ:t;Klj *»||B-r5o ■r<E*5*.. H4l=3«-rJ:5l: 

n ^7 rt(0«>!r©x-^« ©«««*3lf[ t LTX^7 5 V 

[0 0 2 2] ClC-efflL^64^4Eijl4. 

(1:1) ro¥iHH»7?Jilt*Lli<i:t.4LN. -f-c-^, * 
C = XOR (KXOR , M) 

M=XOR (KXOR , C) 

T?j5ys zomu-Qit. it (1 3) 3E)i.ui±a d 4) 



r) I 

-11 



ki (ti ) tti. zmmammtr^m^) 
10 jSLTX<7 7>:/;u« 



[0020] 

[;^i7^>:?ii'*a] 



(10) 



20 l=-r'<T*«»L, 



1. 2, •••) (11) 

EijteJ:t;i|Ji^«Kij (i=1, 2, — : j=1, 2, 
-, n) ^±m-KmL. $&l=-^4l&$tt«tr 

-, Ein (Kin. M) ) ■■■) (12) 

i/XTA-e(t» 4>*A9|tB (CPU) *t»o»*3ijr 

y, i«*iitej:t;«*»tt*3r4^©>^'jd5«-pKa 

30 ^d:te11«ia*ff<t5Ci:3!(<-C*«. 
[0023] 

[^JMf9ilHlk^««CPU««] CPU]El<tt-DjDM 
j|ll»IIUF«©*^©4>-ett3l]M(^3l]rttll^©ni=^ 
*»¥«*«l*t«*©ltl«&*i-rt^4. KlTlccc-e 
ffll.^fcCPU♦«*jS■r. tztzL. ±a©X^7 5>:/7 

***-r4cpu©ui?x^ft*Ri-r«. Lfc3!i<o 

r. c:©u5;x*-e7KU'j/S/>^^Rrill<j:«Btto~2 

« -1-cfcy. A*-r«i ^p^/^^iic©*#**j|itt 

40 [0 0 2 4] 

[»«»ift3ift] u5?xiirt©*e<> h^ffl«*tLfcS 
5«i«tt*JMt-e*«. fiiTc©ajt*xoR-e*L, 

(13) 
(14) 

[0 0 2 5] 

50 [fi^en-x-r h] ui?;^^rt©#e'>K^j&s*tLfc 



(5) 
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[0026] 

C = ADD (KADO , M) 
= M+KADO mod 2" 

[0027] 

»*EXT 1 -e^f. «KEXT1 (i) (i=0. 1, 
-. R-1) l4U5;x4iftR(z3*l6LfcR«(D»«36^b 

[0 0 2 8] 20 
[«iJ-aiHri:©tt«] Ui?X4«ftR-e«a!**i«*T 

»Sllliri:lc^iMtai»-r-5t*. ±»0<E«t^JMt 

fc(ioa)t#-&WEL>fcfi5i^SMlc3iffl-r-5. fl£or, m 

KEXT2 (i) (i=0, 1. -, R-Z) [t\yV7.^tk 30 
/)<Ra)^tSllfXkR-1flO!}E9J-t?. -f-iOXiSlltliL/ 

ROLOTM^S^-r. 
[0029] 

[««»■««•] A (1 2) -?-^x&4l«l«l»«fe*<J: 

r;«<»iiit, ttKi (i=i. 2, ••■) (oe-y hiRjijA^ 

Ki A^b2^fcli3e';; h^A*L. « 1 <D«««lc» 
^l^rnSa>1liI'fr»^^fiEL, ffl5»llt<*«Eij (j = 
1,2, -, n) (D»5iJ<tLT±IB11a)3-K1i«ICJl 40 
M-r-So Plll#l=#li«3tJf-ejg>«i>S*:t'< 
■r'5:t)*.»»«Kij (j=1. 2. -. n) t, 

Ki ©e»^^»5lJ4^?,^»«. fcf£L, it«»(oattnii 
R=i6 (e-vh) ir-r^t. #^®at»-e4^»i**i 
[«i] 



(15) 







110 


XOR 


000 


RO L 


00 1 


ROR 


0 1 0 


ADD 


0 1 1 


SUB 


1 1 1 


EXT 1 


1 0 


E XT 2 



[«2] 



3 - K 




XOR 


1 6 


ROL 


4 


ROR 


4 


ADD 


1 6 


SUB 


1 6 


EXTl 


64 (-4X16) 


EXT2 


60 (-4X15) 



[0030] 

ftnMV»m.t^1t'r-9lt (8, n. KO ) -efc*. 
[003 1] 

im^ya-bX} S t e p 1 : :it*IlttMl . «€ttK 
0 teJ:t;»«*N. *Ai]t«i:*lcto <-0, 1 1 •«- 
0. u<-Otti>o 

S t a p 2 : a^i<0jtmtti^3t'E'Jlzmntitmz^ 

*fl: ■ ea-r*. 

S t a p 3 : S t a p 4^l^&S t a p 9$4l«XNs 09 
S t e p 4 : S t e p 5 S t a p 8 $4?-^^bj£Sil 

0 jt«*<«7-r -5 y jg-r . 

S t o p5 : «<bll*a1 

S t e p 6 : KO *^b ko ( to ) ^^thO If '> 
ftUiLTI OjilkdO IC«aiL. a (8) l-J:y I ^Sk 
^tio ftl#Ii£«li±<OX^blIiltbi(i) $ttUL, 

ki (ti ) ir-r-s. ti <-ti +1 t-rSo 

Step7:kO (to ) =1 JjEblf. llWrokO (t 

0 ' ) =1A^e,ko (to ) =1*-C(De<> h-ftj ^SC 
(2) lcJ:y3tS-r-5. «j#8S3£*«±©«<bll«b 

1 (J) ^tttULTS (4) -e^^x-^in. (u) *a 

ftato ns (u) A<«tta**lfci:#u<-u + 1i:t 
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S t o p 8 : t 0 t- ( t 0 + 1 ) mo d r tti>o 

s t e p 9 : nmtmmm^nmt ■ ^■ti>tmz. 

v + 1 (v = l. 2, -, 8 - 1 ) ♦«|jfe««lc!E«r-r 

s t e p 1 0 : vimtyu-b^izmrtio 

[003 2] 

[l»<*ft^p-lr;^l s t * p 1 : \=^tL. n ^A* 

S t e p 2 : S t e p 3;!l^&S t e p 8$-f^T0!}ff# 10 

Stop3:ti<-0, tl+1 <-Ot-f*. 

S t e p 4 : S t e p 5)!)^bS t e p Bi^^^—^M 

Step5:Step6A^^>StBp7 Jff^'lkjfetlt 

St ep6 :«{bOi«a1 ^IfLiHti. 

St ep7 : Ki 3{(^C>ki ( t i ) *#t?hO try t-* 

ttttUn Qjllkdo l=KaiL. A (8) l=J:tJ I ^Sk 

^■Ti, m I #iiRj£««±09X<bDi«bi (1) imau 20 

ki*i (ti*i ) =(*i <!:-r«. tl = (ti +1) m 
od ti+1 = (ti>l +1) mod rtti>o 

s t a p 8 : 9mit7t^Di^nmttitmz^ ^mt 

i£<ll«ff 1 ft V #ll£XII$ft V + 1 

(v = l, 2. 8-1) ♦!Hj&««H=H«-r«. 
S t e p9 : Ki n«a)|E««*»*±IB11a)3- 

S t e p 1 0 : 7 KUXm (=0~2« -1) ±©1»<» 

Ty^'J±a)7KUXm' (=0~2R -1) IzHE. 30 

7h•l/XQA^6illclll*•eal■r-6. i^i+it 

[0033] 

mUya-bT.} S t e p 1 : 56fllT-5' F (Ml ) , 
BIEttKo *A*-r«i:*lcto «-0. ti ♦-O. 
Otti, 

S t e p2 : ??4»X-4'*S3£*«»a*Lr>*'JIC 
S t e p 3 : S t o p 4A^&S t e p 1 0**€XNs 

©a^*A<«7-r-5*-if«yii-r. 40 

S t e p 4 : * 1 L, 

S t e p 5 : S t a p 6;^l^&S t a p 9 «494^<b£Sll 

S t a p 6 : |E^bll*a1 ^«tlJ-r-5. 

S t a p 7 : KO A^b ko ( to ) ^^tho tf-y 

fttiJLri oit»do it (8) (cj:y I 

» I ♦fs*»ii±(D«^biiiibi (I) ^«aiL, 

kl (ti ) i:T-5o ti ^tl +1 t-r*. 

Stap8:kO (to ) =1 nffircOkO (t 50 



0 ' ) =1A^bko (to ) =i*-^roe-> h«j 
(2) icj: y »:g-r-&. ft j ^mit^tLtoii^itmm b 

1 (J) *ttdiLra (5) -ewr-^in. (u) «tt 
ai-r-&. ns (u) 3!)<ftiii**if=i:#u«-u + i i-r 
4. 

Step9: tO<-(tO+1)mod r tti>o 
S t a p 1 0 : ff^{b£Stt$ft 1 #!ijt«(tl:. ft V 
#SB**li*ftv+1 (v = 1, 2, -, s-1)#fil 

s t a p 1 1 : N. 3!l<JEa<i:&l<a^»^□^r^lc»^f 

■t5-C4l+*ili, «fllT-*F (Mf ) i*»t 
[0034] 

[tt<*^P-b;^] Stapl : \'=^tU n 
Step2:Stap 3;b^&S t a p 1 O^-f^TO)^ 

m'-jf i=-3L>T»7-r « y fit. 

S t a p 3 : Sft-r-^ F (Mi ) 2" e>> htttii 

■r«t*(=ti «-o, tl+1 «-ofr«. 

S t a p 4 : ttKl nl5:(0l»lt#»$£IB1ta)=] 

8 t a p5 : 7KU7.m (=0~2R -1) ±a>56«T 
—SI «±«**ifca*»ic J: y »JJiffl«*;h.fc/^y -P 7 
>^y±(D7KUXm' (=0~2l« -1) ICCIIL, 
t-KUJ^OAN&Htaiii-r*. l*-l+1i:t4. 
S t a p 6 : «***lfc»*T-4i*B«[x-4i|ClE* 
L, «ft**lfc36*^»l=OL^rS tap73&x6Stap 

1 o^ityfii". 

Step7:Stap8*^C>Stap9 *ff<»ft3i*l» 

©*«A<»7-r-5*-e«iyfir. 

St ap8 :X^bB«a1 ^tttU-f^. 
Stapg:Kl i^ik\ (ti ) ^-^tsho h$ 
ttmLTI Oiilkdo CKttU A (8) l=J:y I ^Sk 

&ti>, ft I #iijt<ii±a)«ibB«bi (» ^tttUL. 

kM (tl+1 ) =«! t-r*. ti = (ti +1) m 
od tl+1 = (tl+1 +1) mod r tti. 

s t a p 1 0 : K^it^^m^m^0mi^m^z. ftv 

#J»*««^ftv + 1 (v = 1. 2. -. 8-1) ♦« 
[0035] 

LTa^^I**lfc^^^»■f-^«Do, i hro 

'V ^7 i/ 7 K U vX ^« IC J; S M »5iJ©»fll5iJ t JilT0« S 

XatLTCC I TT©xXh^-V-hNo. 4*fflL^ 
[0 0 3 6] ( 1 ) ^(DflftO^jeit^ 



(7) 
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f=l40<Djl<D«»lCO^.^T. 



31i:l±2tt»5iJ±a)1 *fcl40©pffl(D3£t;-eS.y. -t 
<D05«(±O*fcli1 -efc-So COJirt, M3R5IJT?I±1* 

ftR* 1 ee-v »*tfr*fl)a«n$3 2i:LTX^ 
^>:?;ULfcx— Sl|COL^Ta(35tt»^n'<fc, 0 61* 

^7:7<tLfc««*3«-r. fcffL. (1 

6S) (0'>7hUi?X4f(CJ:«t(D-eft«. CODlSIl, 



1 



(h) - 1 in - 



j -oo 2 j + 1 



r-j 

r— j 



(16) 

*¥acj:yxi7 5>:^;u**ifcT-*3Rwi±, mom 

[0037] (2) iBffiMHIK 

yry..h (17) 



l=J:yB«Lfc 01) o fcffL, (yr } li2«3RM± 
©a*, h 1*231 {yr 1 t {yr*h 1 |V|<Dffilt*-t*l 
h9tO<i:&l<C0 (h) =0 
h = ont&liC0 (h) =1 

icj:yjRjij©7>4rAtt36<1««^i+e.*i«. -t^-e, n 

»IZMH^SCI=J:4»#T-^feJ:i;-f*i*Ui?X^ift 
R*1 ee-y h. S»n*3 2i:LTX<7^>:;;ULfc 
X— SI lcoL^T•t^^■F*l(Di aSHH****^ 7 

hui^x^cD^B^MMtt^ntt, 3£ (1 8) «is(£iit 

[003 8] 

[«W©«I*] JU±lc*lt«**tfTBL<KWLfcJ: 

t;«flix»<DiE itt if 5^>-r fc ft ©»« X 51 
-»ica«)iit7cticj:y»ss*jsL. ®»<»<b**ifc 

^c^^ro^fflic J: y , *3ewi3 J: y*a**i«a;»7i?- 
KSO F A X 7a«':/5i -!i/N- K-^iTWicHJi-c** 
Ci: Ax y. ftcT, «««H»ffl7y:^4« 
ta:«LT«3x h-c-b+i y T-fii«*ji«-c#«. 

*fc, x^7^>:?;i.ffiai(*l?<»T^-^i*2 0'<#jRJ|itt 
1= :?p ^7 <b L TlE11»-«»^b-r 4 fc A ic. 7 r ^7 i/ 5 y 



(18) 

W<D:7T^7'>5yii. aittitffl<b**lTLx-5*-KFA 

XvXxAICfclt57:?y'!r—>3>- V7 h't7XT^ 

-»iEK-iaft]-r<&/£tt7ii9iiriie-t7fty, 

[Hiia}1tJ|l4:K«] 

[H1] ttJlE<oA-KFAxa}«iAffi$ii%-ria. 
[192] *iina)-9iifi«i(=feMt«4iffftiii/x-fA$ 

[ia 3 ] nmtit^itit 8 *(o#]i£»i±a)X^bBii 

[iB4] »im^m (aw eu j3j:i;ff5^(iKij$ 

[H5] *«W(Dj|»«i:j3(t«x^7 7>:?;u«iafl)giE 

[B6] :|:ieW(0|lttfll=felt«S(DflfK$2$JK^L 
[B7] gBffiHHtt«3i-rB. 



[1814] 



Ki 



Ell(ROR) Kll(* bits) El2(X0R) Kl2(16 bits) 



Ei3 
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software hardware 




personal computer 



[B2] 



key Ko 

i__ 



signature 
process 



encryption 
process 



Ke y Kl 



key 



Ko 



veriCication 



authentication 
-process 



fcey Kl 



decryption 
process 

I recipient ] 



£] 



key 
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ref. line: s b, 



[133] 
(s) 



(s) 







ref. line! j bp^^^ 








coding line 




m 1 1 




^0 


^1 *2 



8 10 



[186] 



■^v scrambled 


(n-32) 








W code 


shift / \ N 




register \ / 
\ 


V\ 


i 10 



length 



coded 


data 










key 


Ki 





Bub-scr amblers 









!kii ; 


iKi2l 

sub-keys 


•Kin: 







ciphered data 



software scrambler with n steps 
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